Privacy policy

What we collect, why we need it, and who else ever sees it. Short version: your celebration is yours, and we have never sold anybody's data.

Effective 2026

1. Who is responsible

Limited, of Lagos, Nigeria, is the data controller for CelebrateMi. Questions, requests and complaints go to privacy@celebratemi.com.

2. What we collect

Your account — name, email address, password (hashed, never readable by us), and optionally a phone number, photo, country and date of birth.
Your celebration — the page title, the celebrant's name, dates, photos and videos you upload, and the wishes your guests leave.
Guests — the name and email a guest gives when they send a gift, so we can send them a receipt. A guest does not need an account.
Payouts — your bank name, account number and the account holder name your bank returns when we verify it.
Technical — IP address, browser, and approximate country from your IP (we use ipinfo.io for this) so we can show prices in a sensible currency.

We never see or store card numbers. Card details are entered on Paystack's or Stripe's own pages and never touch our servers.

3. Why we use it

To run your celebration page and show it to the people you share it with — this is us performing our contract with you.
To take gifts, credit your wallet and pay you out — contract, and our legal duty to keep financial records.
To email you about your own celebrations: gifts received, reminders, countdowns. You can turn these off in your settings.
To keep the service safe — spotting fraud and abuse — which is our legitimate interest.
To meet anti-money-laundering and tax obligations where they apply to us.

4. Who else sees it

Paystack and Stripe — to take payments and verify your bank account.
Our email provider — to deliver the emails listed above.
Our hosting provider — which stores the data on our behalf.
Anyone with your page link — a public page is public. You choose whether a page is public or unlisted, and whether gift amounts are shown.
Authorities — only where we are legally required to, and we will tell you unless we are forbidden from doing so.

We do not sell personal data, and we do not share it for anyone else's advertising.

5. Cookies

We use a session cookie to keep you signed in and a security cookie to protect forms from cross-site attacks. Both are strictly necessary — we do not run advertising or third-party tracking cookies.

6. How long we keep it

Celebration pages are designed to last: we keep them until you delete them or close your account. Financial records are kept for as long as the law requires, which is currently six years in Nigeria. Deleting your account removes your pages and personal details; anonymised transaction records may remain where we must keep them.

7. Your rights

Under the Nigeria Data Protection Act — and the GDPR if you are in the UK or EU — you can ask us to show you the data we hold, correct it, delete it, hand it over in a portable form, or stop a particular use of it. Email privacy@celebratemi.com and we will respond within 30 days. You can also complain to the Nigeria Data Protection Commission, or your local supervisory authority.

8. Children

You must be 18 to hold an account. A page may of course celebrate a child — a naming ceremony, a birthday — and where it does, the adult who created it is responsible for what is published about them. Tell us if you believe a child's data is on the site without a parent's agreement and we will remove it.

9. Security

Traffic is encrypted in transit, passwords are hashed, payout accounts are verified with the bank before we will pay into them, and access to production data is limited to the people who need it. No system is perfect: if a breach ever affects your data, we will tell you and the regulator within 72 hours of finding out.

10. Where your data lives

Our servers and our providers may store data outside Nigeria. Where they do, we rely on the safeguards in the Nigeria Data Protection Act and, where relevant, standard contractual clauses.

11. Changes

If we change this policy in a way that affects you, we will email you before it takes effect. The date at the top always tells you which version you are reading.